
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier: JT9K19VxHcKcVv+SkAExjeKTkhWT4+f7rNh7Vo9hE00=
Subject key identifier: 72:9F:93:A7:C8:BC:D3:E1:8E:E7:83:27:DD:89:92:A0:71:9E:FF:1F
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019FA9AB9E0933285D39D565392DAFF457CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number: 03EE
Signing time: Tue 28 Jul 2026 17:00:24 +0000
Manifest this update: Tue 28 Jul 2026 17:00:24 +0000
Manifest next update: Wed 29 Jul 2026 17:00:24 +0000
Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
2: ESPHPr7LBdioiAtN7vAzIbAY8uI.roa (hash: w6HAvIWt/kQOFfQE6ClUTC58ao3Rat6v87kD8koKUa0=)
3: FKDB1nLn_ZS_a9rdy0c5mxFNjAw.roa (hash: 2sgSFU9TG23xIm09t4WNIN0wcgWuOUk3p2yOrCzVZt8=)
4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: ufQ7IWVuWCCoIwHE2Iqkgg+MsUWrVr+vhIvhyMUPnBU=)
5: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
6: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
7: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
8: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=)
9: YQKMXVm06N8zD3NDnbfHYsCtcuU.roa (hash: 4zO+32jaiCVPHg0DG0Z719jsGnydWv+/YMvSSq/GIt4=)
10: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
11: ZQnid9-fJgdD8QY7UXq6Q7rH7pw.roa (hash: XJUBajf9XyDNGQ8tEXvR1yvb6Zo2tLtl5//HhRaFZmw=)
12: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
13: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
14: etJtnzx-tmpw9PiQxsztSahuWEw.roa (hash: 6wcVj2OMy9HJV+jeevBW7KVLUuOgcD7OfyE5vKZNw34=)
15: mT-K5wz7DGgkYoPiR_2XSlQ0B6I.roa (hash: 73E2cGSZQ8+svLr+/xrcMfyFaxZmakWAGtNSf4DhDgw=)
16: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
17: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
18: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:9e:09:33:28:5d:39:d5:65:39:2d:af:f4:57:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Jul 28 17:00:24 2026 GMT
Not After : Jul 29 17:00:24 2026 GMT
Subject: CN=729f93a7c8bcd3e18ee78327dd8992a0719eff1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:c4:0f:fe:ea:60:4d:c5:51:49:21:3e:b4:
b7:b7:56:48:76:02:b8:e3:a9:bb:eb:68:a3:0d:2a:
d8:9b:40:91:f5:9a:5a:1b:ac:13:59:cd:09:46:24:
ce:c0:8d:fc:d3:ae:10:3f:e7:9e:d9:13:66:2a:16:
c3:dd:4b:d1:36:ab:5f:0a:3d:b4:49:c5:97:61:65:
6b:ec:46:5f:a3:c4:1f:a9:ba:c4:ff:19:98:70:0d:
38:0f:05:99:da:3f:df:b9:1b:e2:83:bb:a4:c4:17:
0c:b5:4e:82:0f:85:6e:75:04:5d:92:80:11:b7:cf:
e0:40:90:40:a2:48:e2:ab:a0:95:f4:f3:67:ad:9a:
fa:06:2b:0e:6f:4a:fa:db:2b:a0:85:a2:11:2a:96:
b7:bc:dd:01:7a:3e:a4:e0:7a:09:ad:6f:e4:d6:70:
0d:d5:fa:44:1c:e3:3e:79:3a:3d:a3:95:2d:f6:b4:
68:43:67:88:7a:78:9a:80:e2:6b:86:b5:3f:1a:76:
55:b1:4e:89:0e:32:57:63:26:48:e9:b7:71:b6:1f:
d4:24:50:e0:e5:ae:3f:22:2e:d5:87:0d:1f:c1:15:
8d:95:1f:7c:e1:d6:ca:91:71:bf:e3:93:88:08:bd:
0b:4a:cd:47:e0:fe:17:80:56:94:e6:38:7e:0f:5e:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:93:A7:C8:BC:D3:E1:8E:E7:83:27:DD:89:92:A0:71:9E:FF:1F
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:9a:d2:c6:21:f0:a5:f1:00:a5:f9:08:02:67:0b:8d:91:
96:c4:c5:df:26:3b:16:72:d9:43:f3:9d:77:ec:0c:c5:c2:14:
87:17:42:92:9f:a9:dc:0a:6c:1c:18:7b:f7:d7:bf:9d:9f:b6:
b0:1d:4c:cf:55:18:5a:f3:4a:ec:de:b2:e4:77:7a:b8:13:90:
b2:fe:69:d8:6c:ae:c4:8a:88:45:19:d5:78:4a:6e:cb:4e:e4:
32:7f:de:0b:80:59:bd:a2:13:40:1a:2e:f2:0a:04:c1:38:43:
e3:a7:d7:a6:f1:45:4d:7f:02:39:2d:21:4d:15:1f:dd:20:0d:
79:10:7e:6c:6f:9d:e7:d7:30:40:7d:b0:d8:59:e9:8d:e5:44:
8a:d6:0e:51:67:98:df:5a:ef:1b:57:ff:37:51:a9:0d:bc:2c:
ca:96:ea:ca:d5:02:1b:94:dd:45:80:7e:f4:20:9d:b4:c7:f6:
07:de:be:b0:c8:91:cb:10:74:64:0c:bb:87:19:0c:23:98:88:
37:34:4f:4d:3b:f1:6b:55:f5:86:d9:fb:42:fc:e7:c1:fe:59:
c8:a3:05:c5:f2:43:0f:f2:c7:46:c9:f4:2d:32:d6:2f:a5:a9:
61:f9:70:a8:c9:62:cb:5d:22:03:60:65:ab:ac:a2:37:66:cd:
b5:ca:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:16 2026 by rpki-client